1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-15 23:24:37 +03:00

25 Commits

Author SHA1 Message Date
Tim Prouty
1bcd91366d s3: Fix 'ctx' might be used unitialized warnings 2008-12-01 21:59:00 -08:00
Michael Adam
82ee6d2f7d s3:winbindd/idmap_ad: add entry debug message to nss_ad_get_info()
Michael
2008-12-01 04:37:22 +01:00
Michael Adam
484fa90aef s3:winbindd/idmap_ad: add support for trusted domains to idmap_ad (bug #3661)
This initial fix does at least work for explicitly configured domains.

The patch has a few disadvantages:

1. It does work only for explicitly configured domains, not with
   the default backend (idmap backend = ad), since it relies on the
   domain name being passed in via the idmap_domain. One workaround
   for this would be to create clones of the default idmap_domain
   for domains not explicitly configured.

2. It calls find_domain_from_name_noinit() from idmap_ad_cached_connection.
   The problem here is that only the NetBIOS domain name (workgroup
   name) is passed in via the idmap_domain struct, and the module
   has to establish a connection to the domain based on that information.
   find_domain_from_name_noinit() has the disadvantage that it uses the state
   of the domain list at fork time (unless used from the main winbindd).
   But this should be ok as long as the primary domain was reachable at
   start time.

For nss_info, the situation is similar - This will only work for domains
explicitly configured in smb.conf as follows:
"winbind nss info = rfc2307:dom1 sfu:dom2 rfc2307:dom3 template:dom4"
Setting the default nss info to one of the ad backends (rfc2307, sfu, sfu20)
will fail since the domain name is not passed in with the nss_domain_entry.

Michael
2008-12-01 04:37:22 +01:00
Michael Adam
be233ae32a s3:winbindd/idmap_ad: refactor core of nss_{sfu|sfu20|rfc2307}_init to common function.
Michael
2008-12-01 04:37:22 +01:00
Michael Adam
73fddcd656 s3:winbindd/idmap_ad: rename ctx to mem_ctx in nss_ad_get_info()
in preparation to using the idmap_ad_context there

Michael
2008-12-01 04:37:22 +01:00
Michael Adam
757a1f5132 s3:winbindd/nss_info: change nss_map_{to|from}_alias to take nss_domain_entry
instead of just the domain name

Michael
2008-12-01 04:37:20 +01:00
Michael Adam
03304c5152 Revert "UNFINISHED - s3:idmap_ad: multi-domain"
This reverts commit 6a4957d35d50e6508917aca62b282ae4904187c8.

Sorry - this got accidentially pushed.

Michael
2008-11-25 15:24:43 +01:00
Michael Adam
6a4957d35d UNFINISHED - s3:idmap_ad: multi-domain
Michael
2008-11-25 11:29:42 +01:00
Volker Lendecke
bc9bbda8b3 Fix a valgrind error in idmap_ad_sids_to_unixids()
We need to initialize all mappings in case we don't find anything.

Simo, please check!

Volker
2008-10-20 21:08:20 +02:00
Gerald (Jerry) Carter
28d2683903 * Allow an admin to define the "uid" attribute for a RFC2307
user object in AD to be the username alias.

For example:

  $ net ads search "(uid=coffeedude)"
  distinguishedName: CN=Gerald W. Carter,CN=Users,DC=pink,DC=plainjoe,DC=org
  sAMAccountName: gcarter
  memberOf: CN=UnixUsers,CN=Users,DC=pink,DC=plainjoe,DC=org
  memberOf: CN=Domain Admins,CN=Users,DC=pink,DC=plainjoe,DC=org
  memberOf: CN=Enterprise Admins,CN=Users,DC=pink,DC=plainjoe,DC=org
  memberOf: CN=Schema Admins,CN=Users,DC=pink,DC=plainjoe,DC=org
  uid: coffeedude
  uidNumber: 10000
  gidNumber: 10000
  unixHomeDirectory: /home/gcarter
  loginShell: /bin/bash

  $ ssh coffeedude@192.168.56.91
  Password:

  coffeedude@orville:~$ id
  uid=10000(coffeedude) gid=10000(PINK\unixusers) groups=10000(PINK\unixusers)

  $ getent passwd PINK\\gcarter
  coffeedude:*:10000:10000::/home/gcarter:/bin/bash

  $ getent passwd coffeedude
  coffeedude:*:10000:10000::/home/gcarter:/bin/bash

  $ getent group PINK\\Unixusers
  PINK\unixusers10000:coffeedude
2008-09-16 10:35:21 -07:00
Gerald W. Carter
62791bbd03 idmap_ad: Fix a segfault when calling nss_get_info() with a NULL ads structure. 2008-09-15 17:18:23 -05:00
Volker Lendecke
340ab6a256 idmap rewrite
(This used to be commit 30a180f2fce8cf6a3e5548f6bba453272ba70b33)
2008-08-12 11:28:29 +02:00
Volker Lendecke
0439d4ba61 Revert "Fix nonempty whitespace only lines"
This reverts commit cc77db2acbc35cea58576f1e28c7a760a5e31609.
(This used to be commit ed5b516c2027d78011cdaa7cbbc01bb01e766381)
2008-07-11 17:53:25 +02:00
Volker Lendecke
f7ee7d2fe9 Revert "Tiny logic simplification: Remove an unnecessary else branch"
This reverts commit 6009ae329375b1c40e3d00df977ddccc8b5cc176.
(This used to be commit b71ce00796efdd27b593bbbc36f5cbba23fe9240)
2008-07-11 17:53:25 +02:00
Volker Lendecke
0948a5cda8 Revert "Fix typo"
This reverts commit fe79c8a5b726754703626ca0bff57074274c98c7.
(This used to be commit 62835f8d7e824a5d469ec5f79e4db739e6602f4f)
2008-07-11 17:53:25 +02:00
Volker Lendecke
f70c8ecde2 Revert "Fix indentation"
This reverts commit c4e6de9e34e1ff76552ce6d4e72b343fb5f33306.
(This used to be commit fa9b128e93cca45b9516917f73f586197e7637f3)
2008-07-11 17:53:25 +02:00
Volker Lendecke
47f1090de7 Fix indentation
(This used to be commit c4e6de9e34e1ff76552ce6d4e72b343fb5f33306)
2008-07-03 15:17:58 +02:00
Volker Lendecke
ec7aa52a3b Fix typo
(This used to be commit fe79c8a5b726754703626ca0bff57074274c98c7)
2008-07-02 15:13:14 +02:00
Volker Lendecke
7207b41a5e Tiny logic simplification: Remove an unnecessary else branch
(This used to be commit 6009ae329375b1c40e3d00df977ddccc8b5cc176)
2008-07-02 15:13:01 +02:00
Volker Lendecke
e467fae948 Fix nonempty whitespace only lines
(This used to be commit cc77db2acbc35cea58576f1e28c7a760a5e31609)
2008-07-02 15:04:46 +02:00
Volker Lendecke
900288a2b8 Replace sid_string_static by sid_string_dbg in DEBUGs
(This used to be commit bb35e794ec129805e874ceba882bcc1e84791a09)
2007-12-15 22:09:36 +01:00
Volker Lendecke
a97b33baad Two patches
Hi!

Can you check and push them?

Thanks,

Volker

From b488af5905e2dee12a1a72a3b40801ae5c26f24f Mon Sep 17 00:00:00 2001
From: Volker Lendecke <vl@sernet.de>
Date: Sat, 27 Oct 2007 14:20:09 +0200
Subject: [PATCH] Fix some warnings and errors
(This used to be commit e17d3e10e860c96b6d5208e5fe51e43b8e58c174)
2007-10-27 12:50:36 -07:00
Jeremy Allison
30191d1a57 RIP BOOL. Convert BOOL -> bool. I found a few interesting
bugs in various places whilst doing this (places that assumed
BOOL == int). I also need to fix the Samba4 pidl generation
(next checkin).
Jeremy.
(This used to be commit f35a266b3cbb3e5fa6a86be60f34fe340a3ca71f)
2007-10-18 17:40:25 -07:00
Jeremy Allison
ab9d7bf4f9 r25165: Use talloc_asprintf_append_buffer with an unmodified
string.
Jeremy.
(This used to be commit fe30a523dfc77cc373145624246fd3ad5c62b9ac)
2007-10-10 12:30:47 -05:00
Stefan Metzmacher
28aa4bff8d r25154: move winbindd code into winbindd/
metze
(This used to be commit 3ac7566ae14c48ff9b0f6b232e0ec4b2f73df558)
2007-10-10 12:30:46 -05:00